pub fn sign_in_url(bad: bool, next: Option<&str>) -> StringExpand description
Builds the sign-in URL: /admin/login, with ?bad=true when a previous attempt failed and
&next=<encoded> when next is a safe local path to return to after login (open-redirect
guarded — a non-local next is dropped).